Think Earlier.

    Governance takes longer to build than cryptography takes to break.

    Quantum Risk Governance Services

    Start with the Supplier Readiness Pilot. Readiness, Board Governance and Independent Assessment are there when you need more. Each is described by what you get, then the documents you receive.

    What you get

    Find out, in one day, how your team would handle a cryptographic failure, and where the response breaks.

    Documents you receive

    Exercise record and response-gap report

    Clause coverage

    QCI-QS1 Clause 4.4

    Quantum Crisis Simulation

    Entry Engagement: QCI-QS1 Clause 4.4 (cryptographic incident readiness)

    $5,500 · 2-hour facilitated session

    Run the failure before it runs you. One session, one artifact, and an honest record of how your organization actually responds.

    Clause coverage

    QCI-QS1 Clause 4.4 (cryptographic incident readiness)

    Duration

    2-hour facilitated session

    Engagement Scope

    Up to 15 participants

    Delivery

    Facilitated with your response team

    Format

    Tabletop exercise

    Engagement Scope

    • You need a defensible artifact in under three weeks
    • Budget authority for a six-figure engagement does not yet exist
    • No one can say who declares a cryptographic incident, or what happens next

    Deliverables

    • Custom scenario written for your sector, systems, and supplier estate
    • Live 2-hour facilitated tabletop for up to 15 participants
    • Response-gap report scored against the incident scenarios and annual exercise requirement of Clause 4.4
    • Recommended playbook, escalation, and disclosure updates
    • 30-minute findings debrief with the facilitating consultant

    Ideal For

    • Security and risk leaders who need internal proof before requesting budget
    • Incident response, legal, and communications teams who have never rehearsed a cryptographic failure
    • Organizations asked a quantum question by an auditor, insurer, or board member

    Looking for the individual exercise? Run the free self-guided crisis simulation.

    Ready to Assess Your Organization Against QCI-QS1?

    Start with a scoping conversation. We'll identify which clauses of the standard are most relevant to your risk profile and recommend the right engagement.

    30 minutes. No obligation. We'll tell you what you need, and what you don't.

    Where do I start?

    Find the line that sounds like your situation.

    1. 01 · FreeFree standard"You want to know what good looks like."Go
    2. 02 · FreeFree screening"You want a rough idea of where you stand."Go
    3. 03 · From $5,000Supplier Readiness Pilot"Your board asked what your vendors are doing about quantum risk."Go
    4. 04 · $69,000Readiness Program"You need a documented baseline across your own systems."Go
    5. 05 · $40,000Board Governance"Your directors need an oversight record the minutes can show."Go
    6. 06 · $8,500 / monthRetainer"You need the record kept current each quarter."Go

    This is not a required sequence. Start at any step that fits. Independent assessment is listed separately because it must come from someone who did not build the work (Independence policy).